XK0-006 System Management Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  find /var/log -mtime 2 -name *.log

  Why it's wrong here

  find's -mtime 2 matches files modified between 48 and 72 hours ago, not within the last two days, and the unquoted glob is expanded by the shell before find runs. It is tempting because find with -mtime and -name is the right tool, and it would be correct with -mtime -2 and a quoted pattern.

• ✓

  find /var/log -type f -mtime -2 -name "*.log"

  Why this is correct

  The `-mtime -2` test matches files modified less than two days ago, satisfying the recency constraint, while `-name "*.log"` filters by extension and `-type f` excludes directories. Combining these predicates with `find` in `/var/log` returns exactly the required set in one pass.

• ✗

  locate --mtime -2 *.log /var/log

  Why it's wrong here

  locate queries a prebuilt filename database and supports no -mtime option, so it cannot filter by modification time and may return stale paths. It is tempting because locate is fast for finding files by name, and it would be correct when searching the whole filesystem by name pattern alone.

• ✗

  ls -la /var/log | grep "\.log$" | head -20

  Why it's wrong here

  ls lists directory entries and grep filters names; neither inspects modification timestamps, and head truncates output, so the two-day criterion is never evaluated. It is tempting because piping ls into grep is a familiar way to filter filenames, and it would be correct when only matching names matter, not modification age.